Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: tpYpVptT/UqNH9S25WFKXzhkyn2my3eNBrlJqc3mj7k=
Subject key identifier: DB:57:C0:74:7B:E4:28:70:D1:DF:72:D0:21:90:CD:D8:4C:0E:81:44
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 019E1DFE7D1EF834D1C631E90C04B4D7CADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0ECF
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: YNzgRRzWdr4v8acL2_mrerBZEBY.roa (hash: 0vVcOkUILWsiRv1XZ/svhufbrbQADvOSN3QtFvRS5U8=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: yAouqh2CNtM454dZa2YzC9gT9JZrAVs8WHHVeqO/L6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7d:1e:f8:34:d1:c6:31:e9:0c:04:b4:d7:ca:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=db57c0747be42870d1df72d02190cdd84c0e8144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:e4:ed:a2:42:93:37:1a:88:97:ad:1e:6a:
86:c8:bd:4e:8b:0a:a2:74:b1:fb:65:ad:f6:0b:61:
26:e4:ca:c0:49:43:75:6e:1b:89:e1:95:7f:82:51:
87:3f:19:97:08:61:87:aa:ae:44:40:a9:7d:72:fc:
30:d0:17:28:a2:95:a0:5a:53:46:2c:13:cc:85:df:
4d:59:08:8f:66:12:65:a0:fe:75:4a:cc:b1:4f:62:
84:50:31:ed:25:33:7f:cd:1d:60:ee:65:b8:49:d9:
91:2c:c3:2d:da:52:96:8f:f4:ab:9f:ad:f9:08:66:
a9:31:1f:2b:1c:34:ea:f4:f5:00:30:7c:96:f9:d8:
19:2a:96:d2:f5:59:bf:af:f4:8d:c8:c1:e3:69:4e:
11:84:8a:89:22:73:82:17:b7:cf:75:fb:95:cb:d3:
8e:ba:86:37:b0:ad:75:4b:1e:4c:79:aa:52:31:83:
46:d7:8d:a3:dc:ca:d7:c8:8e:4b:b3:c7:45:c5:cc:
13:41:0b:30:89:d7:bb:bc:73:36:23:18:e3:17:ae:
64:c4:47:73:26:46:64:b0:0d:e6:3b:0f:18:95:02:
f4:1c:af:ae:c7:30:fd:5a:e3:89:b0:96:d2:11:4f:
ad:d9:02:17:24:21:6e:74:73:05:98:9a:ee:82:eb:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:C0:74:7B:E4:28:70:D1:DF:72:D0:21:90:CD:D8:4C:0E:81:44
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:95:be:26:da:ff:4c:dc:1c:ec:dd:55:0b:a8:5a:aa:c7:
61:c2:f9:11:34:10:f5:5a:95:43:e5:4a:c8:b8:bd:0b:90:5c:
45:c9:1c:50:c8:b6:9a:71:4c:dc:9b:00:4c:50:10:55:58:be:
4a:b5:87:dd:0b:14:84:25:14:e4:e6:eb:d1:75:f7:d7:51:07:
a7:db:9a:c6:72:7b:da:04:ff:76:12:1e:9e:d1:4e:97:eb:a9:
c2:f0:4a:65:72:1a:7a:0c:8e:8c:67:b9:a6:b8:a6:8f:09:0f:
b8:74:e3:93:76:96:c7:db:60:17:f1:1f:d0:3b:77:14:ad:c9:
7c:47:ae:c7:77:c8:d1:0b:6b:cb:90:f1:8b:8c:3a:48:f0:fd:
bc:ba:84:82:bc:de:7c:94:f7:f8:0a:22:6b:2e:fc:41:94:37:
fc:f5:c7:a1:c3:dd:1d:f0:8e:4c:0b:2d:f0:ad:78:33:a7:64:
50:bf:f4:ea:0b:b0:80:b3:a5:b5:ac:ef:b5:18:34:17:86:4d:
b0:8d:33:50:b7:9d:be:0b:8c:42:6d:52:d9:5f:de:af:c3:32:
34:a7:01:12:df:19:f1:8e:32:b0:90:4d:e1:72:7d:9d:76:25:
54:e8:ab:81:aa:c4:65:94:4c:29:56:01:24:66:cf:cf:3e:04:
38:bc:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:20 2026 by rpki-client